freeswitch_rce

version: !1https://assets.kitploit.com...

CVE-2021-38699-Stored-XSS

CVE-2021-38699: Stored XSS in TastyIgniter v3.0.7 Restaurtant CMS Stored authenticated cross-site scripting exists in the in TastyIgniter v3.0.7 Restaurtant CMS System Logs section of the web application. https://vulners.com/cve/CVE-2021-38699 POC 1. Execute reflective cross site scripting...

globalprotect-ca-cert-ipc

c2us.exe - Launches a command as the running user in the desktop session of the logged on user. In thise case, launches cmd.exe as SYSTEM in the desktop session of the unprivileged user. c2us.c - Source code for c2us.exe. epinject.exe - Entry point injector, used to spawn a new process and inject...

avpass

AVPASS AVPASS is a tool for leaking the detection model of Android malware detection systems i.e., antivirus software, and bypassing their detection logics by using the leaked information coupled with APK obfuscation techniques. AVPASS is not limited to detection features used by detection system...

CVE-2025-25964

CVE-2025-25964: SQL Injection in School Information Management System v1.0 Introduction In today's digital landscape, SQL Injection SQLi remains one of the most common and dangerous vulnerabilities found in web applications. This blog post discusses a critical SQL Injection vulnerability...

CVE-2025-59287

In this study, we will examine a critical vulnerability CVE-2025-59287 discovered in the Microsoft Windows Server Update Services WSUS environment. This vulnerability arises from the unsafe deserialization of AuthorizationCookie objects sent to the GetCookie endpoint, where encrypted cookie data ...

faraday_plugins

Instalación pip install faraday-plugins Comandos Listar plugins Lista todos los plugins y si son compatibles con comandos y/o informes Parámetros opcionales: -cpf / --custom-plugins-folder PATH: Si se indica, también buscará plugins personalizados en esa ruta faraday-plugins list-plugins Probar l...

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...

CVE-2025-24076

CVE-2025-24076 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Exploit Overview This script exploits a vulnerability in the Windows Cross Device Service that allows privilege escalation on Windows 11 , Windows Server 2025 , and Windows Server 2022 23H2 Server Core...

Crescendo

Table of Contents 1. Getting Started 2. Requirements 3. Components 4. Testing and Development 5. Signing 6. Building 7. Issues/Bugs/Features 8. Troubleshooting 9. TODO Getting Started Apple has introduced some new security mechanisms that we need to enable to get Crescendo running. 1. Ensure that...

apache_skywalking

Protocols There are two types of protocols list here. Probe Protocol. Include the descriptions and definitions about how agent send collected metrics data and traces, also the formats of each entities. Query Protocol. The backend provide query capability to SkyWalking own UI and others. These...

CVE-2024-3094-info

CVE-2024-3094-info Exploración de PoC CVE-2024-3094 https://github.com/amlweems/xzbot https://github.com/lockness-Ko/xz-vulnerable-honeypot https://tukaani.org/xz-backdoor/ - Respuesta de Lasse Collin https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27...

bantam

Bantam An advanced PHP backdoor management tool, with a lightweight server footprint, multi-threaded communication, and an advanced payload generation and obfuscation tool. Features end to end encryption with request unique encryption keys, and payload streaming designed to bypass WAF, IDS, SIEM...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

DECAF

DECAF DECAF short for Dynamic Executable Code Analysis Framework is a binary analysis platform based on QEMU. DECAF++ DECAF++, the new version of DECAF, taint analysis is around 2X faster making it the fastest, to the best of our knowledge, whole-system dynamic taint analysis framework. This...

CVE-2024-4577

CVE-2024-4577: Critical Vulnerability in PHP's CGI Configurations A severe security flaw exists in PHP's CGI mode that allows attackers to run arbitrary commands by manipulating URL parameters. Impacted Versions PHP versions before 7.4.29 and 8.0.19 on Windows running php-cgi. Attack Methodology...

CVE-2026-105486

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and...

Windows_MSKSSRV_LPE_CVE-2023-36802

CVE-2023-36802 POC de escalada de privilegios local autores: chompie Solo para fines de demostración. El exploit completo funciona en sistemas Windows 11 22H2 vulnerables. Adaptar el exploit a todos los sistemas vulnerables se deja como ejercicio para el lector. Git gud, etc. Uso:...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...